$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: vpwG53LRQxsRKRou7LXPPyr49IB/gm1KcQv8LblbT3c= Subject key identifier: F5:E8:C7:64:77:A0:5D:E8:D3:9C:B1:9B:21:ED:BD:8E:12:D2:D0:28 Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1EDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1ED8 Signing time: Fri 30 May 2025 16:45:57 +0000 Manifest this update: Fri 30 May 2025 16:45:57 +0000 Manifest next update: Fri 06 Jun 2025 16:45:57 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: uprNRoO7mfWZsDvdcTanGCJcZG7waYJLTHsXzm7hCvM=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7903 (0x1edf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: May 30 16:45:57 2025 GMT Not After : Jun 6 16:45:57 2025 GMT Subject: CN=6839e0c5-cd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:10:62:a8:a8:16:21:91:d0:36:c2:62:38: 94:74:92:62:7e:db:47:1f:48:33:5c:0f:b7:29:43: 79:34:bf:16:b1:e3:c5:49:87:78:55:c5:b2:f2:6e: 96:0b:61:ce:50:e4:68:0c:24:e9:43:04:b1:fe:9e: 80:a8:e4:43:3e:d0:47:31:b2:ff:36:d5:10:ec:be: 22:f3:92:e6:7d:74:99:73:d1:0a:1d:42:c1:da:59: 85:4c:be:a0:33:f4:4c:a1:d2:9b:01:44:03:6d:37: 41:f6:30:33:d7:b6:5d:e5:9e:5c:43:86:0a:1e:b1: 02:a0:8d:46:b4:a7:99:af:42:31:29:6e:88:61:c1: 6a:5c:b8:c3:5f:4d:13:d4:6b:90:3c:23:53:61:24: 44:f0:21:8f:88:e6:bd:b9:d2:e9:c1:60:d0:92:c9: f5:b1:83:7c:e5:4f:4d:26:5b:54:f0:37:58:3f:e9: 49:2e:a7:b2:f4:5f:d9:3c:03:ea:0f:15:b9:f6:07: eb:af:0f:82:6f:b3:26:79:14:bd:52:09:10:75:7e: 27:4c:80:48:36:1d:d9:84:e0:f2:26:52:29:78:b9: 6f:f2:9b:c2:ec:fe:1f:9f:94:ec:f0:fb:64:7c:c2: 7e:22:a0:05:9d:8e:ed:e2:9e:24:66:94:97:eb:48: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:C7:64:77:A0:5D:E8:D3:9C:B1:9B:21:ED:BD:8E:12:D2:D0:28 X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e1:9a:3d:46:ba:8d:7b:43:43:6f:9d:a5:53:11:27:40:30: 93:15:f8:d2:1c:f4:b3:5f:3d:a8:05:6d:71:fe:55:a4:01:81: 81:6a:46:ff:ff:34:4a:a1:5d:57:dc:e9:8e:75:16:d4:ec:14: a5:b3:8d:5a:4d:1a:3e:24:52:66:44:96:a7:71:2a:09:0a:48: 28:8d:97:30:67:7e:f2:62:c5:10:f8:76:06:0a:f0:92:34:b6: f5:52:4a:df:36:38:b8:71:1f:c7:d9:c1:d9:a9:d0:2c:71:89: 83:b6:8f:7a:09:2e:92:fd:ed:7b:7b:af:48:cc:d7:8c:2c:74: 3c:fb:76:74:b8:3e:9f:26:49:fb:6f:04:01:b2:aa:b3:7c:32: 21:f4:57:27:48:a2:5d:7a:d0:6c:f0:d5:9c:a6:ce:19:ad:73: 13:7b:d2:95:a7:8a:8b:50:c9:41:64:f9:ad:a5:78:7a:a7:4f: 85:7b:ab:92:03:66:ce:ff:01:1e:79:fd:7c:ea:3b:34:f3:28: c8:8f:0c:4d:e1:42:83:b2:f9:77:57:d1:99:8d:c7:58:e3:4b: e9:8a:9c:66:1a:66:05:fb:66:42:cc:e1:30:bf:44:85:4d:32: ac:58:70:98:96:29:51:db:42:6b:41:6a:4b:b2:f6:52:d3:e9: 0a:f0:b3:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUwNTMwMTY0NTU3WhcNMjUwNjA2MTY0NTU3WjAYMRYwFAYD VQQDEw02ODM5ZTBjNS1jZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAricQYqioFiGR0DbCYjiUdJJifttHH0gzXA+3KUN5NL8WsePFSYd4VcWy8m6W C2HOUORoDCTpQwSx/p6AqORDPtBHMbL/NtUQ7L4i85LmfXSZc9EKHULB2lmFTL6g M/RModKbAUQDbTdB9jAz17Zd5Z5cQ4YKHrECoI1GtKeZr0IxKW6IYcFqXLjDX00T 1GuQPCNTYSRE8CGPiOa9udLpwWDQksn1sYN85U9NJltU8DdYP+lJLqey9F/ZPAPq DxW59gfrrw+Cb7MmeRS9UgkQdX4nTIBINh3ZhODyJlIpeLlv8pvC7P4fn5Ts8Ptk fMJ+IqAFnY7t4p4kZpSX60heQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXox2R3 oF3o05yxmyHtvY4S0tAoMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy4Zo9RrqNe0NDb52lUxEnQDCTFfjSHPSzXz2oBW1x/lWkAYGBakb/ /zRKoV1X3OmOdRbU7BSls41aTRo+JFJmRJancSoJCkgojZcwZ37yYsUQ+HYGCvCS NLb1UkrfNji4cR/H2cHZqdAscYmDto96CS6S/e17e69IzNeMLHQ8+3Z0uD6fJkn7 bwQBsqqzfDIh9FcnSKJdetBs8NWcps4ZrXMTe9KVp4qLUMlBZPmtpXh6p0+Fe6uS A2bO/wEeef186js08yjIjwxN4UKDsvl3V9GZjcdY40vpipxmGmYF+2ZCzOEwv0SF TTKsWHCYlilR20JrQWpLsvZS0+kK8LP1 -----END CERTIFICATE-----Generated at Sat May 31 17:26:16 2025 by rpki-client